Rustacean Station

cargo-auditable with Sergey Davidoff

Listen Later

Allen Wyma talks with Sergey Davidoff, creator of cargo-auditable, a cargo plugin for auditing your Rust dependencies for security vulnerabilities.

Contributing to Rustacean Station

Rustacean Station is a community project; get in touch with us if you’d like to suggest an idea for an episode or offer your services as a host or audio editor!

  • Twitter: @rustaceanfm
  • Discord: Rustacean Station
  • Github: @rustacean-station
  • Email: [email protected]
    • Timestamps
    • [@00:10] - Introduction to cargo-auditable
    • [@07:51] - Guarantees that cargo-auditable provides
    • [@17:33] - Trivy and other crates that are in cargo-auditable
    • [@19:47] - cargo-auditable vs cargo audit
    • [@21:09] - Sergey’s programming background
    • [@34:49] - Vulnerabilities Sergey was able to encounter and reported to RustSec
    • [@39:47] - Feedbacks and reactions from library owners that were found to have issues
    • [@48:52] - How does Sergey handle problems and issues he encounters?
    • [@56:48] - Sergey’s tips and advice to those who want to improve security on their projects
    • [@59:36] - Parting thoughts and shoutouts
      • Credits

      Intro Theme: Aerocity

      Audio Editing: Plangora

      Hosting Infrastructure: Jon Gjengset

      Show Notes: Plangora

      Hosts: Allen Wyma

      ...more
      View all episodesView all episodes
      Download on the App Store
      Rustacean StationBy Rustacean Station
      • 4.9
      • 4.9
      • 4.9
      • 4.9
      • 4.9

      4.9

      62 ratings

      More shows like Rustacean Station

      View all
      Software Engineering Radio - the podcast for professional software developers by se-radio@computer.org

      Software Engineering Radio - the podcast for professional software developers

      262 Listeners

      The Changelog: Software Development, Open Source by Changelog Media

      The Changelog: Software Development, Open Source

      285 Listeners

      LINUX Unplugged by Jupiter Broadcasting

      LINUX Unplugged

      263 Listeners

      Talk Python To Me by Michael Kennedy

      Talk Python To Me

      584 Listeners

      Software Engineering Daily by Software Engineering Daily

      Software Engineering Daily

      629 Listeners

      Python Bytes by Michael Kennedy and Brian Okken

      Python Bytes

      212 Listeners

      Late Night Linux by The Late Night Linux Family

      Late Night Linux

      154 Listeners

      Syntax - Tasty Web Development Treats by Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers

      Syntax - Tasty Web Development Treats

      986 Listeners

      CoRecursive: Coding Stories by Adam Gordon Bell - Software Developer

      CoRecursive: Coding Stories

      185 Listeners

      Kubernetes Podcast from Google by Abdel Sghiouar, Kaslin Fields

      Kubernetes Podcast from Google

      182 Listeners

      Practical AI by Practical AI LLC

      Practical AI

      197 Listeners

      The Stack Overflow Podcast by The Stack Overflow Podcast

      The Stack Overflow Podcast

      63 Listeners

      The Real Python Podcast by Real Python

      The Real Python Podcast

      137 Listeners

      Oxide and Friends by Oxide Computer Company

      Oxide and Friends

      47 Listeners

      Rust in Production by Matthias Endler

      Rust in Production

      11 Listeners